| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 1 | #!/bin/bash | 
 | 2 | # | 
 | 3 | # lib/neutron | 
 | 4 | # Install and start **Neutron** network services | 
 | 5 |  | 
 | 6 | # Dependencies: | 
 | 7 | # | 
 | 8 | # ``functions`` file | 
 | 9 | # ``DEST`` must be defined | 
 | 10 |  | 
 | 11 | # ``stack.sh`` calls the entry points in this order: | 
 | 12 | # | 
 | 13 | # - is_XXXX_enabled | 
 | 14 | # - install_XXXX | 
 | 15 | # - configure_XXXX | 
 | 16 | # - init_XXXX | 
 | 17 | # - start_XXXX | 
 | 18 | # - stop_XXXX | 
 | 19 | # - cleanup_XXXX | 
 | 20 |  | 
 | 21 | # Save trace setting | 
 | 22 | XTRACE=$(set +o | grep xtrace) | 
 | 23 | set +o xtrace | 
 | 24 |  | 
 | 25 | # Defaults | 
 | 26 | # -------- | 
 | 27 |  | 
 | 28 | # Set up default directories | 
 | 29 | GITDIR["python-neutronclient"]=$DEST/python-neutronclient | 
 | 30 |  | 
 | 31 | NEUTRON_AGENT=${NEUTRON_AGENT:-openvswitch} | 
 | 32 | NEUTRON_DIR=$DEST/neutron | 
 | 33 | NEUTRON_AUTH_CACHE_DIR=${NEUTRON_AUTH_CACHE_DIR:-/var/cache/neutron} | 
 | 34 |  | 
 | 35 | NEUTRON_BIN_DIR=$(get_python_exec_prefix) | 
 | 36 | NEUTRON_DHCP_BINARY="neutron-dhcp-agent" | 
 | 37 |  | 
 | 38 | NEUTRON_CONF_DIR=/etc/neutron | 
 | 39 | NEUTRON_CONF=$NEUTRON_CONF_DIR/neutron.conf | 
 | 40 | NEUTRON_META_CONF=$NEUTRON_CONF_DIR/metadata_agent.ini | 
 | 41 |  | 
 | 42 | NEUTRON_DHCP_CONF=$NEUTRON_CONF_DIR/dhcp_agent.ini | 
 | 43 | NEUTRON_L3_CONF=$NEUTRON_CONF_DIR/l3_agent.ini | 
 | 44 | NEUTRON_AGENT_CONF=$NEUTRON_CONF_DIR/ | 
 | 45 |  | 
 | 46 | NEUTRON_STATE_PATH=${NEUTRON_STATE_PATH:=$DATA_DIR/neutron} | 
 | 47 | NEUTRON_AUTH_CACHE_DIR=${NEUTRON_AUTH_CACHE_DIR:-/var/cache/neutron} | 
 | 48 |  | 
 | 49 | # By default, use the ML2 plugin | 
 | 50 | NEUTRON_PLUGIN=${NEUTRON_PLUGIN:-ml2} | 
 | 51 | NEUTRON_PLUGIN_CONF_FILENAME=${NEUTRON_PLUGIN_CONF_FILENAME:-ml2_conf.ini} | 
 | 52 | NEUTRON_PLUGIN_CONF_PATH=$NEUTRON_CONF_DIR/plugins/$NEUTRON_PLUGIN | 
 | 53 | NEUTRON_PLUGIN_CONF=$NEUTRON_PLUGIN_CONF_PATH/$NEUTRON_PLUGIN_CONF_FILENAME | 
 | 54 |  | 
 | 55 | NEUTRON_AGENT_BINARY=${NEUTRON_AGENT_BINARY:-neutron-$NEUTRON_AGENT-agent} | 
 | 56 | NEUTRON_L3_BINARY=${NEUTRON_L3_BINARY:-neutron-l3-agent} | 
 | 57 | NEUTRON_META_BINARY=${NEUTRON_META_BINARY:-neutron-metadata-agent} | 
 | 58 |  | 
 | 59 | # Public facing bits | 
 | 60 | if is_ssl_enabled_service "neutron" || is_service_enabled tls-proxy; then | 
 | 61 |     NEUTRON_SERVICE_PROTOCOL="https" | 
 | 62 | fi | 
 | 63 | NEUTRON_SERVICE_HOST=${NEUTRON_SERVICE_HOST:-$SERVICE_HOST} | 
 | 64 | NEUTRON_SERVICE_PORT=${NEUTRON_SERVICE_PORT:-9696} | 
 | 65 | NEUTRON_SERVICE_PORT_INT=${NEUTRON_SERVICE_PORT_INT:-19696} | 
 | 66 | NEUTRON_SERVICE_PROTOCOL=${NEUTRON_SERVICE_PROTOCOL:-$SERVICE_PROTOCOL} | 
 | 67 |  | 
 | 68 | NEUTRON_AUTH_STRATEGY=${NEUTRON_AUTH_STRATEGY:-keystone} | 
 | 69 | NEUTRON_ROOTWRAP=$(get_rootwrap_location neutron) | 
 | 70 | NEUTRON_ROOTWRAP_CONF_FILE=$NEUTRON_CONF_DIR/rootwrap.conf | 
 | 71 | NEUTRON_ROOTWRAP_DAEMON_CMD="sudo $NEUTRON_ROOTWRAP-daemon $NEUTRON_ROOTWRAP_CONF_FILE" | 
 | 72 |  | 
 | 73 | # Add all enabled config files to a single config arg | 
 | 74 | NEUTRON_CONFIG_ARG=${NEUTRON_CONFIG_ARG:-""} | 
 | 75 |  | 
 | 76 | # Functions | 
 | 77 | # --------- | 
 | 78 |  | 
 | 79 | # Test if any Neutron services are enabled | 
 | 80 | # is_neutron_enabled | 
 | 81 | function is_neutron_enabled { | 
 | 82 |     [[ ,${ENABLED_SERVICES} =~ ,"neutron-" || ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0 | 
 | 83 |     return 1 | 
 | 84 | } | 
 | 85 |  | 
 | 86 | # Test if any Neutron services are enabled | 
 | 87 | # is_neutron_enabled | 
 | 88 | function is_neutron_legacy_enabled { | 
 | 89 |     [[ ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0 | 
 | 90 |     return 1 | 
 | 91 | } | 
 | 92 |  | 
 | 93 | # cleanup_neutron() - Remove residual data files, anything left over from previous | 
 | 94 | # runs that a clean run would need to clean up | 
 | 95 | function cleanup_neutron_new { | 
 | 96 |     source $TOP_DIR/lib/neutron_plugins/${NEUTRON_AGENT}_agent | 
 | 97 |     if is_neutron_ovs_base_plugin; then | 
 | 98 |         neutron_ovs_base_cleanup | 
 | 99 |     fi | 
 | 100 |  | 
 | 101 |     if [[ $NEUTRON_AGENT == "linuxbridge" ]]; then | 
 | 102 |         neutron_lb_cleanup | 
 | 103 |     fi | 
 | 104 |     # delete all namespaces created by neutron | 
 | 105 |     for ns in $(sudo ip netns list | grep -o -E '(qdhcp|qrouter|qlbaas|fip|snat)-[0-9a-f-]*'); do | 
 | 106 |         sudo ip netns delete ${ns} | 
 | 107 |     done | 
 | 108 | } | 
 | 109 |  | 
 | 110 | # configure_neutron() - Set config files, create data dirs, etc | 
 | 111 | function configure_neutron_new { | 
 | 112 |     sudo install -d -o $STACK_USER $NEUTRON_CONF_DIR | 
 | 113 |  | 
 | 114 |     (cd $NEUTRON_DIR && exec ./tools/generate_config_file_samples.sh) | 
 | 115 |  | 
 | 116 |     cp $NEUTRON_DIR/etc/neutron.conf.sample $NEUTRON_CONF | 
 | 117 |  | 
 | 118 |     configure_neutron_rootwrap | 
 | 119 |  | 
 | 120 |     mkdir -p $NEUTRON_PLUGIN_CONF_PATH | 
 | 121 |  | 
 | 122 |     cp $NEUTRON_DIR/etc/neutron/plugins/$NEUTRON_PLUGIN/$NEUTRON_PLUGIN_CONF_FILENAME.sample $NEUTRON_PLUGIN_CONF | 
 | 123 |  | 
 | 124 |     iniset $NEUTRON_CONF database connection `database_connection_url neutron` | 
 | 125 |     iniset $NEUTRON_CONF DEFAULT state_path $NEUTRON_STATE_PATH | 
 | 126 |     iniset $NEUTRON_CONF oslo_concurrency lock_path $NEUTRON_STATE_PATH/lock | 
 | 127 |     iniset $NEUTRON_CONF DEFAULT use_syslog $SYSLOG | 
 | 128 |  | 
| Sean M. Collins | fbba3b9 | 2016-05-12 11:17:53 -0400 | [diff] [blame] | 129 |     iniset $NEUTRON_CONF DEFAULT debug True | 
 | 130 |  | 
| Sean M. Collins | 5394cc1 | 2016-05-11 15:03:38 -0400 | [diff] [blame] | 131 |     iniset_rpc_backend neutron $NEUTRON_CONF | 
 | 132 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 133 |     # Neutron API server & Neutron plugin | 
 | 134 |     if is_service_enabled neutron-api; then | 
 | 135 |         local policy_file=$NEUTRON_CONF_DIR/policy.json | 
 | 136 |         cp $NEUTRON_DIR/etc/policy.json $policy_file | 
 | 137 |         # Allow neutron user to administer neutron to match neutron account | 
 | 138 |         sed -i 's/"context_is_admin":  "role:admin"/"context_is_admin":  "role:admin or user_name:neutron"/g' $policy_file | 
 | 139 |  | 
 | 140 |         cp $NEUTRON_DIR/etc/api-paste.ini $NEUTRON_CONF_DIR/api-paste.ini | 
 | 141 |  | 
 | 142 |         iniset $NEUTRON_CONF DEFAULT core_plugin ml2 | 
 | 143 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 144 |         iniset $NEUTRON_CONF DEFAULT policy_file $policy_file | 
 | 145 |         iniset $NEUTRON_CONF DEFAULT allow_overlapping_ips True | 
 | 146 |  | 
 | 147 |         iniset $NEUTRON_CONF DEFAULT auth_strategy $NEUTRON_AUTH_STRATEGY | 
 | 148 |         configure_auth_token_middleware $NEUTRON_CONF neutron $NEUTRON_AUTH_CACHE_DIR keystone_authtoken | 
 | 149 |  | 
 | 150 |         # Configuration for neutron notifations to nova. | 
 | 151 |         iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_status_changes $Q_NOTIFY_NOVA_PORT_STATUS_CHANGES | 
 | 152 |         iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_data_changes $Q_NOTIFY_NOVA_PORT_DATA_CHANGES | 
 | 153 |  | 
 | 154 |         iniset $NEUTRON_CONF nova auth_type password | 
 | 155 |         iniset $NEUTRON_CONF nova auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v3" | 
 | 156 |         iniset $NEUTRON_CONF nova username nova | 
 | 157 |         iniset $NEUTRON_CONF nova password $SERVICE_PASSWORD | 
 | 158 |         iniset $NEUTRON_CONF nova user_domain_id default | 
 | 159 |         iniset $NEUTRON_CONF nova project_name $SERVICE_TENANT_NAME | 
 | 160 |         iniset $NEUTRON_CONF nova project_domain_id default | 
 | 161 |         iniset $NEUTRON_CONF nova region_name $REGION_NAME | 
 | 162 |  | 
 | 163 |         # Configure VXLAN | 
 | 164 |         # TODO(sc68cal) not hardcode? | 
 | 165 |         iniset $NEUTRON_PLUGIN_CONF ml2 tenant_network_types vxlan | 
 | 166 |         iniset $NEUTRON_PLUGIN_CONF ml2 type_drivers vxlan | 
 | 167 |         iniset $NEUTRON_PLUGIN_CONF ml2 mechanism_drivers openvswitch,linuxbridge | 
 | 168 |         iniset $NEUTRON_PLUGIN_CONF ml2_type_vxlan vni_ranges 1001:2000 | 
 | 169 |     fi | 
 | 170 |  | 
 | 171 |     # Neutron OVS or LB agent | 
 | 172 |     if is_service_enabled neutron-agent; then | 
 | 173 |         iniset $NEUTRON_PLUGIN_CONF agent tunnel_types vxlan | 
| Sean M. Collins | fbba3b9 | 2016-05-12 11:17:53 -0400 | [diff] [blame] | 174 |         iniset $NEUTRON_PLUGIN_CONF DEFAULT debug True | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 175 |  | 
 | 176 |         # Configure the neutron agent | 
 | 177 |         if [[ $NEUTRON_AGENT == "linuxbridge" ]]; then | 
 | 178 |             iniset $NEUTRON_PLUGIN_CONF securitygroup iptables | 
 | 179 |             iniset $NEUTRON_PLUGIN_CONF vxlan local_ip $HOST_IP | 
 | 180 |         else | 
 | 181 |             iniset $NEUTRON_PLUGIN_CONF securitygroup iptables_hybrid | 
 | 182 |             iniset $NEUTRON_PLUGIN_CONF ovs local_ip $HOST_IP | 
 | 183 |         fi | 
 | 184 |     fi | 
 | 185 |  | 
 | 186 |     # DHCP Agent | 
 | 187 |     if is_service_enabled neutron-dhcp; then | 
 | 188 |         cp $NEUTRON_DIR/etc/dhcp_agent.ini.sample $NEUTRON_DHCP_CONF | 
 | 189 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 190 |         iniset $NEUTRON_DHCP_CONF DEFAULT debug True | 
 | 191 |         iniset $NEUTRON_DHCP_CONF agent root_helper_daemon "$NEUTRON_ROOTWRAP_DAEMON_CMD" | 
 | 192 |         iniset $NEUTRON_DHCP_CONF DEFAULT interface_driver $NEUTRON_AGENT | 
 | 193 |         neutron_plugin_configure_dhcp_agent $NEUTRON_DHCP_CONF | 
 | 194 |     fi | 
 | 195 |  | 
 | 196 |     if is_service_enabled neutron-l3; then | 
 | 197 |         cp $NEUTRON_DIR/etc/l3_agent.ini.sample $NEUTRON_L3_CONF | 
 | 198 |         iniset $NEUTRON_L3_CONF DEFAULT interface_driver $NEUTRON_AGENT | 
 | 199 |         iniset $NEUTRON_CONF DEFAULT service_plugins router | 
 | 200 |         iniset $NEUTRON_L3_CONF agent root_helper_daemon "$NEUTRON_ROOTWRAP_DAEMON_CMD" | 
 | 201 |         iniset $NEUTRON_L3_CONF DEFAULT debug True | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 202 |         neutron_plugin_configure_l3_agent $NEUTRON_L3_CONF | 
 | 203 |     fi | 
 | 204 |  | 
 | 205 |     # Metadata | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 206 |     if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 207 |         cp $NEUTRON_DIR/etc/metadata_agent.ini.sample $NEUTRON_META_CONF | 
 | 208 |  | 
| Sean M. Collins | fbba3b9 | 2016-05-12 11:17:53 -0400 | [diff] [blame] | 209 |         iniset $NEUTRON_META_CONF DEFAULT debug True | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 210 |         iniset $NEUTRON_META_CONF DEFAULT nova_metadata_ip $SERVICE_HOST | 
 | 211 |         iniset $NEUTRON_META_CONF agent root_helper_daemon "$NEUTRON_ROOTWRAP_DAEMON_CMD" | 
 | 212 |  | 
 | 213 |         # TODO(dtroyer): remove the v2.0 hard code below | 
 | 214 |         iniset $NEUTRON_META_CONF DEFAULT auth_url $KEYSTONE_SERVICE_URI/v2.0 | 
 | 215 |         configure_auth_token_middleware $NEUTRON_META_CONF neutron $NEUTRON_AUTH_CACHE_DIR DEFAULT | 
 | 216 |     fi | 
 | 217 |  | 
 | 218 |     # Format logging | 
 | 219 |     if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then | 
 | 220 |         setup_colorized_logging $NEUTRON_CONF DEFAULT project_id | 
 | 221 |     else | 
 | 222 |         # Show user_name and project_name by default | 
 | 223 |         iniset $NEUTRON_CONF DEFAULT logging_context_format_string "%(asctime)s.%(msecs)03d %(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s] %(instance)s%(message)s" | 
 | 224 |     fi | 
 | 225 |  | 
 | 226 |     if is_service_enabled tls-proxy; then | 
 | 227 |         # Set the service port for a proxy to take the original | 
 | 228 |         iniset $NEUTRON_CONF DEFAULT bind_port "$NEUTRON_SERVICE_PORT_INT" | 
 | 229 |     fi | 
 | 230 |  | 
 | 231 |     if is_ssl_enabled_service "nova"; then | 
 | 232 |         iniset $NEUTRON_CONF nova cafile $SSL_BUNDLE_FILE | 
 | 233 |     fi | 
 | 234 |  | 
 | 235 |     if is_ssl_enabled_service "neutron"; then | 
 | 236 |         ensure_certificates NEUTRON | 
 | 237 |  | 
 | 238 |         iniset $NEUTRON_CONF DEFAULT use_ssl True | 
 | 239 |         iniset $NEUTRON_CONF DEFAULT ssl_cert_file "$NEUTRON_SSL_CERT" | 
 | 240 |         iniset $NEUTRON_CONF DEFAULT ssl_key_file "$NEUTRON_SSL_KEY" | 
 | 241 |     fi | 
 | 242 |  | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 243 |     # Metering | 
 | 244 |     if is_service_enabled neutron-metering; then | 
| Sean M. Collins | 60f394a | 2016-06-17 16:15:30 -0400 | [diff] [blame] | 245 |         source $TOP_DIR/lib/neutron_plugins/services/metering | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 246 |         neutron_agent_metering_configure_common | 
 | 247 |         neutron_agent_metering_configure_agent | 
 | 248 |     fi | 
 | 249 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 250 | } | 
 | 251 |  | 
 | 252 | # configure_neutron_rootwrap() - configure Neutron's rootwrap | 
 | 253 | function configure_neutron_rootwrap { | 
 | 254 |     # Set the paths of certain binaries | 
 | 255 |     neutron_rootwrap=$(get_rootwrap_location neutron) | 
 | 256 |  | 
 | 257 |     # Specify ``rootwrap.conf`` as first parameter to neutron-rootwrap | 
 | 258 |     local rootwrap_sudoer_cmd="${neutron_rootwrap} $NEUTRON_CONF_DIR/rootwrap.conf" | 
 | 259 |  | 
 | 260 |     # Deploy new rootwrap filters files (owned by root). | 
 | 261 |     # Wipe any existing rootwrap.d files first | 
 | 262 |     if [[ -d $NEUTRON_CONF_DIR/rootwrap.d ]]; then | 
 | 263 |         sudo rm -rf $NEUTRON_CONF_DIR/rootwrap.d | 
 | 264 |     fi | 
 | 265 |  | 
 | 266 |     # Deploy filters to /etc/neutron/rootwrap.d | 
 | 267 |     sudo install -d -o root -g root -m 755 $NEUTRON_CONF_DIR/rootwrap.d | 
 | 268 |     sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/neutron/rootwrap.d/*.filters $NEUTRON_CONF_DIR/rootwrap.d | 
 | 269 |  | 
 | 270 |     # Set up ``rootwrap.conf``, pointing to ``$NEUTRON_CONF_DIR/rootwrap.d`` | 
 | 271 |     sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/rootwrap.conf $NEUTRON_CONF_DIR | 
 | 272 |     sudo sed -e "s:^filters_path=.*$:filters_path=$NEUTRON_CONF_DIR/rootwrap.d:" -i $NEUTRON_CONF_DIR/rootwrap.conf | 
 | 273 |  | 
 | 274 |     # Set up the rootwrap sudoers for Neutron | 
 | 275 |     tempfile=`mktemp` | 
 | 276 |     echo "$STACK_USER ALL=(root) NOPASSWD: $rootwrap_sudoer_cmd *" >$tempfile | 
 | 277 |     chmod 0440 $tempfile | 
 | 278 |     sudo chown root:root $tempfile | 
 | 279 |     sudo mv $tempfile /etc/sudoers.d/neutron-rootwrap | 
 | 280 | } | 
 | 281 |  | 
 | 282 | # Make Neutron-required changes to nova.conf | 
 | 283 | function configure_neutron_nova_new { | 
 | 284 |     iniset $NOVA_CONF DEFAULT use_neutron True | 
 | 285 |     iniset $NOVA_CONF neutron auth_type "password" | 
 | 286 |     iniset $NOVA_CONF neutron auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v3" | 
 | 287 |     iniset $NOVA_CONF neutron username neutron | 
 | 288 |     iniset $NOVA_CONF neutron password "$SERVICE_PASSWORD" | 
 | 289 |     iniset $NOVA_CONF neutron user_domain_name "Default" | 
 | 290 |     iniset $NOVA_CONF neutron project_name "$SERVICE_TENANT_NAME" | 
 | 291 |     iniset $NOVA_CONF neutron project_domain_name "Default" | 
 | 292 |     iniset $NOVA_CONF neutron auth_strategy $NEUTRON_AUTH_STRATEGY | 
 | 293 |     iniset $NOVA_CONF neutron region_name "$REGION_NAME" | 
 | 294 |     iniset $NOVA_CONF neutron url $NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT | 
 | 295 |  | 
 | 296 |     iniset $NOVA_CONF DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver | 
 | 297 |  | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 298 |     if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 299 |         iniset $NOVA_CONF neutron service_metadata_proxy "True" | 
 | 300 |     fi | 
 | 301 |  | 
 | 302 | } | 
 | 303 |  | 
 | 304 | # Tenant               User       Roles | 
 | 305 | # ------------------------------------------------------------------ | 
 | 306 | # service              neutron    admin        # if enabled | 
 | 307 |  | 
 | 308 | # create_neutron_accounts() - Create required service accounts | 
 | 309 | function create_neutron_accounts_new { | 
 | 310 |     if [[ "$ENABLED_SERVICES" =~ "neutron-api" ]]; then | 
 | 311 |  | 
 | 312 |         create_service_user "neutron" | 
 | 313 |  | 
 | 314 |         neutron_service=$(get_or_create_service "neutron" \ | 
 | 315 |             "network" "Neutron Service") | 
 | 316 |         get_or_create_endpoint $neutron_service \ | 
 | 317 |             "$REGION_NAME" \ | 
 | 318 |             "$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/" \ | 
 | 319 |             "$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/" \ | 
 | 320 |             "$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/" | 
 | 321 |     fi | 
 | 322 | } | 
 | 323 |  | 
 | 324 | # create_neutron_cache_dir() - Part of the init_neutron() process | 
 | 325 | function create_neutron_cache_dir { | 
 | 326 |     # Create cache dir | 
 | 327 |     sudo install -d -o $STACK_USER $NEUTRON_AUTH_CACHE_DIR | 
 | 328 |     rm -f $NEUTRON_AUTH_CACHE_DIR/* | 
 | 329 | } | 
 | 330 |  | 
 | 331 | # init_neutron() - Initialize databases, etc. | 
 | 332 | function init_neutron_new { | 
 | 333 |  | 
 | 334 |     recreate_database neutron | 
 | 335 |  | 
 | 336 |     # Run Neutron db migrations | 
 | 337 |     $NEUTRON_BIN_DIR/neutron-db-manage $NEUTRON_CONFIG_ARG upgrade heads | 
 | 338 |  | 
 | 339 |     create_neutron_cache_dir | 
 | 340 | } | 
 | 341 |  | 
 | 342 | # install_neutron() - Collect source and prepare | 
 | 343 | function install_neutron_new { | 
 | 344 |     git_clone $NEUTRON_REPO $NEUTRON_DIR $NEUTRON_BRANCH | 
 | 345 |     setup_develop $NEUTRON_DIR | 
 | 346 |  | 
 | 347 |     # Install neutron-lib from git so we make sure we're testing | 
 | 348 |     # the latest code. | 
 | 349 |     if use_library_from_git "neutron-lib"; then | 
 | 350 |         git_clone_by_name "neutron-lib" | 
 | 351 |         setup_dev_lib "neutron-lib" | 
 | 352 |     fi | 
 | 353 |  | 
 | 354 |     # L3 service requires radvd | 
 | 355 |     if is_service_enabled neutron-l3; then | 
 | 356 |         install_package radvd | 
 | 357 |     fi | 
 | 358 |  | 
 | 359 |     if is_service_enabled neutron-agent neutron-dhcp neutron-l3; then | 
 | 360 |         #TODO(sc68cal) - kind of ugly | 
 | 361 |         source $TOP_DIR/lib/neutron_plugins/${NEUTRON_AGENT}_agent | 
 | 362 |         neutron_plugin_install_agent_packages | 
 | 363 |     fi | 
 | 364 |  | 
 | 365 | } | 
 | 366 |  | 
 | 367 | # install_neutronclient() - Collect source and prepare | 
 | 368 | function install_neutronclient { | 
 | 369 |     if use_library_from_git "python-neutronclient"; then | 
 | 370 |         git_clone_by_name "python-neutronclient" | 
 | 371 |         setup_dev_lib "python-neutronclient" | 
 | 372 |         sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-neutronclient"]}/tools/,/etc/bash_completion.d/}neutron.bash_completion | 
 | 373 |     fi | 
 | 374 | } | 
 | 375 |  | 
 | 376 | # start_neutron_api() - Start the API process ahead of other things | 
 | 377 | function start_neutron_api { | 
 | 378 |     local service_port=$NEUTRON_SERVICE_PORT | 
 | 379 |     local service_protocol=$NEUTRON_SERVICE_PROTOCOL | 
 | 380 |     if is_service_enabled tls-proxy; then | 
 | 381 |         service_port=$NEUTRON_SERVICE_PORT_INT | 
 | 382 |         service_protocol="http" | 
 | 383 |     fi | 
 | 384 |  | 
 | 385 |     # Start the Neutron service | 
 | 386 |     # TODO(sc68cal) Stop hard coding this | 
 | 387 |     run_process neutron-api "$NEUTRON_BIN_DIR/neutron-server --config-file $NEUTRON_CONF --config-file $NEUTRON_PLUGIN_CONF" | 
 | 388 |  | 
 | 389 |     if is_ssl_enabled_service "neutron"; then | 
 | 390 |         ssl_ca="--ca-certificate=${SSL_BUNDLE_FILE}" | 
 | 391 |         local testcmd="wget ${ssl_ca} --no-proxy -q -O- $service_protocol://$NEUTRON_SERVICE_HOST:$service_port" | 
 | 392 |         test_with_retry "$testcmd" "Neutron did not start" $SERVICE_TIMEOUT | 
 | 393 |     else | 
 | 394 |         if ! wait_for_service $SERVICE_TIMEOUT $service_protocol://$NEUTRON_SERVICE_HOST:$service_port; then | 
 | 395 |             die $LINENO "neutron-api did not start" | 
 | 396 |         fi | 
 | 397 |     fi | 
 | 398 |  | 
 | 399 |  | 
 | 400 |     # Start proxy if enabled | 
 | 401 |     if is_service_enabled tls-proxy; then | 
 | 402 |         start_tls_proxy '*' $NEUTRON_SERVICE_PORT $NEUTRON_SERVICE_HOST $NEUTRON_SERVICE_PORT_INT & | 
 | 403 |     fi | 
 | 404 | } | 
 | 405 |  | 
 | 406 | # start_neutron() - Start running processes, including screen | 
 | 407 | function start_neutron_new { | 
 | 408 |     _set_config_files | 
 | 409 |  | 
 | 410 |     # Start up the neutron agents if enabled | 
 | 411 |     # TODO(sc68cal) Make this pluggable so different DevStack plugins for different Neutron plugins | 
 | 412 |     # can resolve the $NEUTRON_AGENT_BINARY | 
 | 413 |     if is_service_enabled neutron-agent; then | 
 | 414 |         run_process neutron-agent "$NEUTRON_BIN_DIR/$NEUTRON_AGENT_BINARY $NEUTRON_CONFIG_ARG" | 
 | 415 |     fi | 
 | 416 |     if is_service_enabled neutron-dhcp; then | 
 | 417 |         neutron_plugin_configure_dhcp_agent $NEUTRON_DHCP_CONF | 
 | 418 |         run_process neutron-dhcp "$NEUTRON_BIN_DIR/$NEUTRON_DHCP_BINARY $NEUTRON_CONFIG_ARG" | 
 | 419 |     fi | 
 | 420 |     if is_service_enabled neutron-l3; then | 
 | 421 |         run_process neutron-l3 "$NEUTRON_BIN_DIR/$NEUTRON_L3_BINARY $NEUTRON_CONFIG_ARG" | 
 | 422 |         # XXX(sc68cal) - Here's where plugins can wire up their own networks instead | 
 | 423 |         # of the code in lib/neutron_plugins/services/l3 | 
 | 424 |         if type -p neutron_plugin_create_initial_networks > /dev/null; then | 
 | 425 |             neutron_plugin_create_initial_networks | 
 | 426 |         else | 
 | 427 |             # XXX(sc68cal) Load up the built in Neutron networking code and build a topology | 
 | 428 |             source $TOP_DIR/lib/neutron_plugins/services/l3 | 
 | 429 |             # Create the networks using servic | 
 | 430 |             create_neutron_initial_network | 
 | 431 |         fi | 
 | 432 |     fi | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 433 |     if is_service_enabled neutron-metadata-agent; then | 
 | 434 |         run_process neutron-metadata-agent "$NEUTRON_BIN_DIR/$NEUTRON_META_BINARY $NEUTRON_CONFIG_ARG" | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 435 |     fi | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 436 |  | 
 | 437 |     if is_service_enabled neutron-metering; then | 
 | 438 |         run_process neutron-metering "$AGENT_METERING_BINARY --config-file $NEUTRON_CONF --config-file $METERING_AGENT_CONF_FILENAME" | 
 | 439 |     fi | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 440 | } | 
 | 441 |  | 
 | 442 | # stop_neutron() - Stop running processes (non-screen) | 
 | 443 | function stop_neutron_new { | 
 | 444 |     for serv in neutron-api neutron-agent neutron-l3; do | 
 | 445 |         stop_process $serv | 
 | 446 |     done | 
 | 447 |  | 
 | 448 |     if is_service_enabled neutron-dhcp; then | 
 | 449 |         stop_process neutron-dhcp | 
 | 450 |         pid=$(ps aux | awk '/[d]nsmasq.+interface=(tap|ns-)/ { print $2 }') | 
 | 451 |         [ ! -z "$pid" ] && sudo kill -9 $pid | 
 | 452 |     fi | 
 | 453 |  | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 454 |     if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 455 |         sudo pkill -9 -f neutron-ns-metadata-proxy || : | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 456 |         stop_process neutron-metadata-agent | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 457 |     fi | 
 | 458 | } | 
 | 459 |  | 
 | 460 | # Compile the lost of enabled config files | 
 | 461 | function _set_config_files { | 
 | 462 |  | 
| Sean M. Collins | e7d2b56 | 2016-05-12 12:04:03 -0400 | [diff] [blame] | 463 |     NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_CONF" | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 464 |  | 
 | 465 |     #TODO(sc68cal) OVS and LB agent uses settings in NEUTRON_PLUGIN_CONF (ml2_conf.ini) but others may not | 
 | 466 |     if is_service_enabled neutron-agent; then | 
 | 467 |         NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_PLUGIN_CONF" | 
 | 468 |     fi | 
 | 469 |  | 
 | 470 |     if is_service_enabled neutron-dhcp; then | 
 | 471 |         NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_DHCP_CONF" | 
 | 472 |     fi | 
 | 473 |  | 
 | 474 |     if is_service_enabled neutron-l3; then | 
 | 475 |         NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_L3_CONF" | 
 | 476 |     fi | 
 | 477 |  | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 478 |     if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 479 |         NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_META_CONF" | 
 | 480 |     fi | 
 | 481 |  | 
 | 482 | } | 
 | 483 |  | 
 | 484 | # Dispatch functions | 
 | 485 | # These are needed for compatibility between the old and new implementations | 
 | 486 | # where there are function name overlaps.  These will be removed when | 
 | 487 | # neutron-legacy is removed. | 
 | 488 | # TODO(sc68cal) Remove when neutron-legacy is no more. | 
 | 489 | function cleanup_neutron { | 
 | 490 |     if is_neutron_legacy_enabled; then | 
 | 491 |         # Call back to old function | 
 | 492 |         cleanup_mutnauq "$@" | 
 | 493 |     else | 
 | 494 |         cleanup_neutron_new "$@" | 
 | 495 |     fi | 
 | 496 | } | 
 | 497 |  | 
 | 498 | function configure_neutron { | 
 | 499 |     if is_neutron_legacy_enabled; then | 
 | 500 |         # Call back to old function | 
 | 501 |         configure_mutnauq "$@" | 
 | 502 |     else | 
 | 503 |         configure_neutron_new "$@" | 
 | 504 |     fi | 
 | 505 | } | 
 | 506 |  | 
 | 507 | function configure_neutron_nova { | 
 | 508 |     if is_neutron_legacy_enabled; then | 
 | 509 |         # Call back to old function | 
 | 510 |         create_nova_conf_neutron "$@" | 
 | 511 |     else | 
 | 512 |         configure_neutron_nova_new "$@" | 
 | 513 |     fi | 
 | 514 | } | 
 | 515 |  | 
 | 516 | function create_neutron_accounts { | 
 | 517 |     if is_neutron_legacy_enabled; then | 
 | 518 |         # Call back to old function | 
 | 519 |         create_mutnauq_accounts "$@" | 
 | 520 |     else | 
 | 521 |         create_neutron_accounts_new "$@" | 
 | 522 |     fi | 
 | 523 | } | 
 | 524 |  | 
 | 525 | function init_neutron { | 
 | 526 |     if is_neutron_legacy_enabled; then | 
 | 527 |         # Call back to old function | 
 | 528 |         init_mutnauq "$@" | 
 | 529 |     else | 
 | 530 |         init_neutron_new "$@" | 
 | 531 |     fi | 
 | 532 | } | 
 | 533 |  | 
 | 534 | function install_neutron { | 
 | 535 |     if is_neutron_legacy_enabled; then | 
 | 536 |         # Call back to old function | 
 | 537 |         install_mutnauq "$@" | 
 | 538 |     else | 
 | 539 |         install_neutron_new "$@" | 
 | 540 |     fi | 
 | 541 | } | 
 | 542 |  | 
 | 543 | function start_neutron { | 
 | 544 |     if is_neutron_legacy_enabled; then | 
 | 545 |         # Call back to old function | 
 | 546 |         start_mutnauq_l2_agent "$@" | 
 | 547 |         start_mutnauq_other_agents "$@" | 
 | 548 |     else | 
 | 549 |         start_neutron_new "$@" | 
 | 550 |     fi | 
 | 551 | } | 
 | 552 |  | 
 | 553 | function stop_neutron { | 
 | 554 |     if is_neutron_legacy_enabled; then | 
 | 555 |         # Call back to old function | 
 | 556 |         stop_mutnauq "$@" | 
 | 557 |     else | 
 | 558 |         stop_neutron_new "$@" | 
 | 559 |     fi | 
 | 560 | } | 
 | 561 |  | 
 | 562 | # Restore xtrace | 
 | 563 | $XTRACE |